Lucene search

K
nvd[email protected]NVD:CVE-2023-28226
HistoryApr 11, 2023 - 9:15 p.m.

CVE-2023-28226

2023-04-1121:15:23
CWE-347
web.nvd.nist.gov
1
cve-2023-28226
windows enroll engine
security feature bypass

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

Windows Enroll Engine Security Feature Bypass Vulnerability

Affected configurations

NVD
Node
microsoftwindows_10_1507Range<10.0.10240.19869
OR
microsoftwindows_10_1607Range<10.0.14393.5850
OR
microsoftwindows_10_1809Range<10.0.17763.4252
OR
microsoftwindows_10_20h2Range<10.0.19042.2846
OR
microsoftwindows_10_21h2Range<10.0.19044.2846
OR
microsoftwindows_10_22h2Range<10.0.19045.2846
OR
microsoftwindows_11_21h2Range<10.0.22000.1817
OR
microsoftwindows_11_22h2Range<10.0.22621.1555

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%